Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9db7b542-b491-4cae-9985-cb7fb866fd3c/51871f06-6f55-3a4a-bb87-437dbc0fa3f4.roa
File: 51871f06-6f55-3a4a-bb87-437dbc0fa3f4.roa (raw, json)
Hash identifier: SCIfhbXviqud4D5kuO/4fkHbgYifKeR/hh11rTu/HJE=
Subject key identifier: B2:B7:9B:C6:44:56:51:E6:C7:5B:D3:26:FB:2F:E1:F3:44:11:26:8D
Certificate issuer: /CN=9db7b542-b491-4cae-9985-cb7fb866fd3c
Certificate serial: 010D0C9F432858486AAD9F459C0F71F6BE1D0000
Authority key identifier: E7:EB:28:6F:E4:EA:07:1B:67:19:A5:99:F0:9C:9A:09:24:8D:E3:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9db7b542-b491-4cae-9985-cb7fb866fd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9db7b542-b491-4cae-9985-cb7fb866fd3c/51871f06-6f55-3a4a-bb87-437dbc0fa3f4.roa
Signing time: Fri 03 Jan 2025 01:12:24 +0000
ROA not before: Fri 03 Jan 2025 01:12:24 +0000
ROA not after: Thu 03 Apr 2025 00:12:24 +0000
asID: 140822
IP address blocks: 23.131.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:ad:9f:45:9c:0f:71:f6:be:1d:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9db7b542-b491-4cae-9985-cb7fb866fd3c
Validity
Not Before: Jan 3 01:12:24 2025 GMT
Not After : Apr 3 00:12:24 2025 GMT
Subject: CN=8bab8fd6-f39c-4c3f-954e-660b0edeb440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:cd:08:cf:2d:be:09:80:7a:4b:95:71:ea:
70:44:81:cf:ed:df:56:b7:37:30:5e:94:90:6c:b5:
6b:0c:03:f5:fd:73:01:b8:3c:d2:27:d9:44:45:ee:
e1:ab:4b:43:37:49:e7:6e:d2:d7:c7:ff:5f:3d:53:
b0:03:08:59:ec:5f:48:30:06:37:ba:d6:e1:e4:0d:
d2:72:6a:ca:36:0e:0a:5a:48:07:cc:75:f5:4e:bd:
d7:e9:57:37:01:0b:f8:e1:6d:60:db:1a:88:6d:7d:
78:3e:f3:5c:65:38:24:81:69:4e:4d:1a:08:8f:cb:
dd:0f:05:8c:2f:ec:9d:c9:2d:16:32:d9:12:0c:03:
6c:2a:dd:42:17:69:80:31:75:c8:2b:bf:f3:9b:31:
9c:81:00:9c:cd:76:00:17:c5:df:e6:72:6e:b3:3f:
b4:39:71:f2:eb:2d:32:4e:7f:d8:f4:a6:3b:c0:53:
c5:85:71:39:e7:a1:b3:fa:71:6f:81:ae:a2:16:60:
4a:90:29:bd:c2:f4:85:98:f0:74:dc:41:ab:49:8f:
1f:5d:00:ae:43:ab:75:09:85:e2:f3:3d:ff:a1:df:
3a:53:28:a8:54:b1:cd:23:2f:3c:9e:14:4f:2f:3e:
77:b4:b5:ef:5d:61:03:06:ec:a5:fd:2f:ab:7f:1a:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B7:9B:C6:44:56:51:E6:C7:5B:D3:26:FB:2F:E1:F3:44:11:26:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9db7b542-b491-4cae-9985-cb7fb866fd3c/51871f06-6f55-3a4a-bb87-437dbc0fa3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9db7b542-b491-4cae-9985-cb7fb866fd3c/9db7b542-b491-4cae-9985-cb7fb866fd3c.crl
X509v3 Authority Key Identifier:
keyid:E7:EB:28:6F:E4:EA:07:1B:67:19:A5:99:F0:9C:9A:09:24:8D:E3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9db7b542-b491-4cae-9985-cb7fb866fd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:73:f4:68:b5:c0:ab:5c:8c:d9:4f:37:85:00:84:93:8c:53:
2b:7f:33:a9:0b:3b:c0:02:44:21:83:c4:ea:69:a6:eb:57:12:
68:a8:29:83:c3:a5:ef:a9:f8:76:13:54:90:ab:5b:df:8d:54:
11:da:bc:65:bb:0d:69:29:6d:d4:8c:a5:ae:7b:93:47:ce:1c:
f3:a3:05:a9:35:81:d1:f5:16:9c:12:d1:da:d6:ea:93:d8:eb:
94:11:83:9a:45:0c:36:e2:68:fe:75:99:3f:52:59:3c:ea:f0:
ce:1a:05:25:cf:f9:57:c6:6e:1b:28:41:49:46:a5:d8:54:cb:
16:b7:75:ab:72:d3:07:76:c1:a3:b9:ec:6e:47:28:9d:f9:0e:
e4:d6:70:f4:60:96:a9:f0:bd:33:98:c5:2c:29:a6:78:78:a1:
3b:20:ca:8a:8e:a2:84:8f:2b:49:ad:88:4c:cb:3b:6d:1f:04:
8e:7d:7e:40:f5:73:8d:fd:29:8c:c4:8f:e6:7d:ce:19:a8:84:
48:a5:b9:82:b3:93:c4:f9:37:1d:99:7f:bb:cd:6c:ad:4d:6d:
76:c1:d0:1b:66:62:30:7e:d9:85:b1:c1:e8:19:de:21:98:ba:
f7:aa:f6:9d:52:45:b9:5f:b1:3a:a3:bc:6e:7c:36:e1:ae:2c:
49:c2:b0:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqrZ9FnA9x9r4dAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRiN2I1NDItYjQ5MS00Y2FlLTk5ODUtY2I3ZmI4NjZm
ZDNjMB4XDTI1MDEwMzAxMTIyNFoXDTI1MDQwMzAwMTIyNFowLzEtMCsGA1UEAxMk
OGJhYjhmZDYtZjM5Yy00YzNmLTk1NGUtNjYwYjBlZGViNDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugbNCM8tvgmAekuVcepwRIHP7d9WtzcwXpSQ
bLVrDAP1/XMBuDzSJ9lERe7hq0tDN0nnbtLXx/9fPVOwAwhZ7F9IMAY3utbh5A3S
cmrKNg4KWkgHzHX1Tr3X6Vc3AQv44W1g2xqIbX14PvNcZTgkgWlOTRoIj8vdDwWM
L+ydyS0WMtkSDANsKt1CF2mAMXXIK7/zmzGcgQCczXYAF8Xf5nJusz+0OXHy6y0y
Tn/Y9KY7wFPFhXE556Gz+nFvga6iFmBKkCm9wvSFmPB03EGrSY8fXQCuQ6t1CYXi
8z3/od86UyioVLHNIy88nhRPLz53tLXvXWEDBuyl/S+rfxr8iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLK3m8ZEVlHmx1vTJvsv4fNEESaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZGI3
YjU0Mi1iNDkxLTRjYWUtOTk4NS1jYjdmYjg2NmZkM2MvNTE4NzFmMDYtNmY1NS0z
YTRhLWJiODctNDM3ZGJjMGZhM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWRiN2I1NDItYjQ5MS00Y2FlLTk5
ODUtY2I3ZmI4NjZmZDNjLzlkYjdiNTQyLWI0OTEtNGNhZS05OTg1LWNiN2ZiODY2
ZmQzYy5jcmwwHwYDVR0jBBgwFoAU5+sob+TqBxtnGaWZ8JyaCSSN47AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZGI3YjU0Mi1iNDkxLTRjYWUtOTk4NS1jYjdm
Yjg2NmZkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxz9Gi1wKtcjNlPN4UAhJOMUyt/M6kLO8ACRCGDxOppputXEmioKYPD
pe+p+HYTVJCrW9+NVBHavGW7DWkpbdSMpa57k0fOHPOjBak1gdH1FpwS0drW6pPY
65QRg5pFDDbiaP51mT9SWTzq8M4aBSXP+VfGbhsoQUlGpdhUyxa3daty0wd2waO5
7G5HKJ35DuTWcPRglqnwvTOYxSwppnh4oTsgyoqOooSPK0mtiEzLO20fBI59fkD1
c439KYzEj+Z9zhmohEiluYKzk8T5Nx2Zf7vNbK1NbXbB0BtmYjB+2YWxwegZ3iGY
uveq9p1SRblfsTqjvG58NuGuLEnCsMo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:21 2025 by rpki-client